> -----Original Message-----
> From: Daniel Carrera [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, August 05, 2003 2:05 AM
> To: SpamAssassin list
> Subject: [SAtalk] My rules don't work.
> 
> 
> Hello,
> 
> Below I include a spam email I got.  I have a series of rules 
> that should 
> have been activated and were not:
> 
> body     MY_REGISTER_1 /register/i
> describe MY_REGISTER_1 Contains the word "register"
> score    MY_REGISTER_1 0.1
>  
> body     MY_REGISTER_2 /thanks for.*register/i
> describe MY_REGISTER_2 Thanks for registering
> score    MY_REGISTER_2 0.3
> 
> body     MY_GIRLFRIEND /girlfriends?/i
> describe MY_GIRLFRIEND Something about a girlfriend
> score    MY_GIRLFRIEND 0.33
>  
> The body of the spam contains "thanks for pre-registering" 
> which should 
> activate the first two rules, and it contains "see you on 
> deck with me and 
> my girlfriends" which should activate the last.
> 
> Yet the headers don't show any of this.
> 
> I know that SA does indeed read my user_prefs file because I 
> was able to 
> activate bayes by inserting "use_bayes 1", and if I change 
> the required 
> hits, I can see the change in the headers produced by SA.
> 
> Therefore, I assume that the error is in how I wrote my rules, or my 
> understanding of how rules work.
> 
> Any help would be appreciated.
> 
> ----- Forwarded message from Katrina 
> <[EMAIL PROTECTED]> -----
> 
> Date: Mon, 4 Aug 2003 16:37:56 +0900
> From: "Katrina" <[EMAIL PROTECTED]>
> Subject: Take a Fantasy Cruise with Me!
> To: [EMAIL PROTECTED] (ruby-talk ML)
> 
> Hi again, 
> 
> it's me Katrina from Ecstasea Yacht Charter. Just wanted to 
> say thanks for pre-registering 
> with us and we wanted to let you know that we are now up and 
> running! I can't 
> wait to see you on deck with me and my girlfriends! In case 
> you don't remember 
> how to reach me, you can go to the website below to make 
> discreet reservations...
> 
> We'll have a great time!
> 
> xoxo- Katrina
> 
> http://EcstaseaYachtCharter.com
> 
> ----- End forwarded message -----
> 
> -- 
> Daniel Carrera | PGP: 6643 8C8B 3522 66CB D16C D779 2FDD 7DAC 
> 9AF7 7A88
> Math PhD. UMD  | http://www.math.umd.edu/~dcarrera/pgp.html
> 
> * * * * *  Weekly Smile * * * * * * * * * * * * * * * * * * * 
> * * * * *
>   Sign in a hotel in Athens:
>   Visitors are expected to complain at the office between the hours
>   of 9 and 11 A.M. daily.
> * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * 
> * * * * * 

Send yourself a simple message to test the rules. 

The Base64 trick that spammers use will NOT look at body rules! You may have
recieved one with this trick.

Chris Santerre 
System Admin and SA Custom Rules Emporium keeper 
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm 
"A little nonsense now and then, is relished by the wisest men." - Willy
Wonka 


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to